@Loh Jane,
I cannot imagine a situation in which they would be interchangeable.
"Active attacks relate to an adversary' attempt to modify system resources or affect their operations."
Or . . .
"Active attacks means (that) an adversary attempts to modify system resources or affect their operations."
I also see a problem in that resources don't operate. Someone or some process would use resources for an operation of some kind, but the resources themselves are not active.